Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/EW3RQhUZd-nazzYPGOfgeqWiWqc.roa
File: EW3RQhUZd-nazzYPGOfgeqWiWqc.roa (raw, json)
Hash identifier: U+ariaUEhQPKmw7i17Mz8cpyHwgG4d8o/eZGtO9W3cQ=
Subject key identifier: 11:6D:D1:42:15:19:77:E9:DA:CF:36:0F:18:E7:E0:7A:A5:A2:5A:A7
Certificate issuer: /CN=b50be8bc92bf6b429d9818ad655cc2398fdfbf86
Certificate serial: 056C5261
Authority key identifier: B5:0B:E8:BC:92:BF:6B:42:9D:98:18:AD:65:5C:C2:39:8F:DF:BF:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQvovJK_a0KdmBitZVzCOY_fv4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/EW3RQhUZd-nazzYPGOfgeqWiWqc.roa
Signing time: Sat 01 Jan 2022 01:01:20 +0000
ROA not before: Sat 01 Jan 2022 01:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 45.14.173.0/24 maxlen: 24
45.14.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90985057 (0x56c5261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50be8bc92bf6b429d9818ad655cc2398fdfbf86
Validity
Not Before: Jan 1 01:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=116dd142151977e9dacf360f18e7e07aa5a25aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:b0:e4:81:95:bb:df:ac:bf:20:36:10:8d:
5a:23:8f:a7:cd:e5:44:2a:e3:12:3c:94:20:07:05:
29:35:8d:69:6d:e5:23:93:fe:b8:9e:a0:b2:3e:06:
0e:fb:b0:58:8e:4a:5d:d1:42:b2:32:b2:6a:e6:22:
a6:70:de:d7:8d:01:ff:25:d0:74:03:27:74:da:91:
4e:2a:c2:c6:b3:79:90:76:59:5b:e8:c9:21:bb:f9:
a8:86:f5:f6:97:05:38:e9:09:d6:c8:90:f9:2a:6d:
39:73:01:09:31:cb:ab:fb:37:f5:2f:22:c4:5f:e6:
0e:21:f3:a6:ce:a9:82:ba:b0:ae:38:a2:61:86:e3:
c1:ab:2d:2a:db:4b:07:75:58:15:42:ba:f4:86:b8:
b0:55:a2:6e:0d:71:af:ea:36:03:c9:f2:ef:18:00:
7e:67:e9:b7:30:c2:5c:49:96:67:f9:06:ee:ad:34:
a8:39:33:96:cc:c2:f5:e9:86:ac:f6:fe:95:ea:cc:
67:dd:a7:59:b2:8d:a9:bb:ba:ff:a2:2c:2c:52:a3:
84:e0:13:4b:5c:49:e4:c6:fa:ea:c5:bd:13:93:6a:
e8:a4:f6:c4:dc:13:89:2d:a5:80:94:07:38:2f:cc:
aa:af:2a:f1:22:1e:5e:29:f5:a2:b8:b0:ef:7a:ab:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6D:D1:42:15:19:77:E9:DA:CF:36:0F:18:E7:E0:7A:A5:A2:5A:A7
X509v3 Authority Key Identifier:
keyid:B5:0B:E8:BC:92:BF:6B:42:9D:98:18:AD:65:5C:C2:39:8F:DF:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQvovJK_a0KdmBitZVzCOY_fv4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/EW3RQhUZd-nazzYPGOfgeqWiWqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/tQvovJK_a0KdmBitZVzCOY_fv4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.173.0-45.14.174.255
Signature Algorithm: sha256WithRSAEncryption
0f:38:08:9c:92:40:b5:46:69:e9:9e:0e:1c:f1:d2:d5:ca:87:
52:50:1d:0f:1e:83:1c:71:81:0c:e6:29:cb:6e:aa:41:fb:1c:
a1:b8:0d:a5:df:7f:83:c2:af:46:38:da:2a:ad:72:62:f6:d5:
71:6c:72:c2:02:a0:68:8e:51:46:ab:77:c4:bf:da:01:78:f7:
b6:18:ff:91:3a:69:75:db:34:0d:e3:73:91:03:81:36:8c:c5:
b8:82:5f:c9:e6:34:ef:1e:68:21:db:8a:a3:e3:24:8c:85:e2:
31:13:61:9e:09:00:e1:b2:93:37:da:68:21:e4:37:45:a6:06:
e5:4d:79:61:3f:71:37:b0:10:cd:de:ba:42:de:3c:b9:bf:4a:
12:42:4a:54:d7:07:b2:f1:a9:b9:18:02:36:0b:d0:b0:01:e6:
9e:15:0a:d9:dd:20:fa:95:8e:13:0a:e3:51:e7:36:72:26:1f:
ba:70:6b:b8:da:a8:f6:2f:50:15:ee:01:93:42:a5:51:a6:91:
a7:a7:4b:c7:d8:c6:40:df:3a:ed:24:b0:d8:1b:bb:e3:7b:53:
cc:6b:fa:40:a9:e1:f0:4f:61:e5:10:10:80:58:0d:fe:07:28:
f0:70:62:5e:25:e0:87:4a:71:5e:b8:05:7f:01:00:f1:c4:4e:
a2:f5:b1:9e
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBWxSYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NTBiZThiYzkyYmY2YjQyOWQ5ODE4YWQ2NTVjYzIzOThmZGZiZjg2MB4XDTIyMDEw
MTAxMDEyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTE2ZGQxNDIxNTE5
NzdlOWRhY2YzNjBmMThlN2UwN2FhNWEyNWFhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJSesOSBlbvfrL8gNhCNWiOPp83lRCrjEjyUIAcFKTWNaW3l
I5P+uJ6gsj4GDvuwWI5KXdFCsjKyauYipnDe140B/yXQdAMndNqRTirCxrN5kHZZ
W+jJIbv5qIb19pcFOOkJ1siQ+SptOXMBCTHLq/s39S8ixF/mDiHzps6pgrqwrjii
YYbjwastKttLB3VYFUK69Ia4sFWibg1xr+o2A8ny7xgAfmfptzDCXEmWZ/kG7q00
qDkzlszC9emGrPb+lerMZ92nWbKNqbu6/6IsLFKjhOATS1xJ5Mb66sW9E5Nq6KT2
xNwTiS2lgJQHOC/Mqq8q8SIeXin1oriw73qrvzUCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBQRbdFCFRl36drPNg8Y5+B6paJapzAfBgNVHSMEGDAWgBS1C+i8kr9rQp2Y
GK1lXMI5j9+/hjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RRdm92SktfYTBLZG1CaXRaVnpDT1lfZnY0WS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGEvMzQyMjFhLWZiN2UtNGE3Ni1iOWQ3LTIwNzVjZDMxZmY5My8x
L0VXM1JRaFVaZC1uYXp6WVBHT2ZnZXFXaVdxYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEv
MzQyMjFhLWZiN2UtNGE3Ni1iOWQ3LTIwNzVjZDMxZmY5My8xL3RRdm92SktfYTBL
ZG1CaXRaVnpDT1lfZnY0WS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn
BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQALQ6tAwQALQ6uMA0GCSqGSIb3
DQEBCwUAA4IBAQAPOAickkC1Rmnpng4c8dLVyodSUB0PHoMccYEM5inLbqpB+xyh
uA2l33+Dwq9GONoqrXJi9tVxbHLCAqBojlFGq3fEv9oBePe2GP+ROml12zQN43OR
A4E2jMW4gl/J5jTvHmgh24qj4ySMheIxE2GeCQDhspM32mgh5DdFpgblTXlhP3E3
sBDN3rpC3jy5v0oSQkpU1wey8am5GAI2C9CwAeaeFQrZ3SD6lY4TCuNR5zZyJh+6
cGu42qj2L1AV7gGTQqVRppGnp0vH2MZA3zrtJLDYG7vje1PMa/pAqeHwT2HlEBCA
WA3+ByjwcGJeJeCHSnFeuAV/AQDxxE6i9bGe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:59 2024 by rpki-client on console-ams.rpki-client.org